Showing posts with label ASP.Net Outsourcing. Show all posts
Showing posts with label ASP.Net Outsourcing. Show all posts

Wednesday, 25 January 2012

Common ASP.NET Application Security Flaws

For highly secure ASP.NET Web applications, such as Internet banking sites, you may want to implement a more secure solution for user authentication than the user name and password combination. You can use client-side digital certificates to verify the identity of the user. In addition, you can map client-side digital certificates to Windows accounts on the server if necessary.

There is a wide array of attacks that ASP.NET web applications need to protect against but most security holes are due to flaws in the following:

Authentication... makes easier for attackers to reveal the User’s credentials, or worse to dig down the application’s authentication altogether. The secure password policy, brute force attacks and password hashing are the part of authentication mechanism.

Authorization… Allowing logged-in users to perform actions without authorization verification. This can possibly be ensured with all ASP.NET web pages in a consistent manner.

Data validation… is all about trusting data submitted by the User and then acting upon it. It is generated by the lack of data consistency throughout the web, and failing to encode the data sent to the server.

App configuration… is about using some default configuration on the application and hosted server. Different applications require different configurations but the focus of this section is on those that fall under the responsibility of the web developer.

At SPEC INDIA, our trained team of ASP.NET developers is eager to take care of any custom requirement from our probable Clients and prospects from all over the globe. If you have any requirement or queries, feel free to drop an email at our id lead@spec-india.com, we will be happy to assist you.

Monday, 23 January 2012

Exception Handling in ASP.NET

Exceptions or errors are unusual occurrences that happen within the logic of an application. The CLR has provided structured way to deal with exceptions using Try/Catch block. While errors occur in ASP.NET programming, they either get handled or needs re-look at the code. While an unhandled exception propagates, the User may be redirected to an error page using different ASP.NET configuration settings.

The programmers can control the exceptions that get thrown and prevent a redirection. Error or exception handling in ASP.NET can be further categorized into 2 categories as below:
  • Handling exceptions as and when they are thrown
  • Redirecting the User to an error page when errors go unhandled

Logically, as a ASP.NET developer, you cannot program for every possibility. Hence, they are imminent.

At SPEC INDIA, our trained team of ASP.NET developers is eager to take care of any custom requirement from our probable Clients and prospects from all over the globe. If you have any requirement or queries, feel free to drop an email at our id lead@spec-india.com, we will be happy to assist you.

Tuesday, 17 January 2012

Multithreading in ASP.NET

In ASP.NET programming, there are indeed many operations which demand to run in parallel with the main code, but demand very high CPU usage. The examples include acquiring a database and waiting for the results, any heavy 3rd party software integration, etc. – hence, here the ASP.NET programmers are suffering a heavy and loaded input/output operation. Thus, the application will be dead with no response until this time consuming operation completes.

A common solution for this problem in ASP.NET programming in multithreading.

Multithreading is a technique that can be used to perform time consuming tasks in a separate additional thread other than the main application thread. The .NET framework provides you with a class library that allows you to use multithreading and asynchronous programming techniques. In multithreading technique, you can use the thread pool to conquer the new thread, or you can also create it manually. Actually, it depends on the level of control you want to have over the new thread.

Thus, by using multithreading, you can use 2 threads in parallel – the main one, and the newly created one. Both are running in parallel, and this certainly improves the performance and responsiveness of an application.

At SPEC INDIA, our trained team of ASP.NET developers is eager to take care of any custom requirement from our probable Clients and prospects from all over the globe. If you have any requirement or queries, feel free to drop an email at our id lead@spec-india.com, we will be happy to assist you.